Analysis
- max time kernel
149s - max time network
116s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
02/06/2026, 16:52
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jester.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
jester.exe
Resource
win11-20260513-en
windows11-21h2-x64
3 signatures
150 seconds
General
- Target jester.exe
- Size 790KB
- Sample260602-vdsagsaz7x
- SHA256 be21e639ed569732b8a06d0d17c16f2361124e6ec8dd46724acc97525a923af8
- MD5 8097553a2e49cbe70ae99048735332ed
- SHA1 a77c517dd7dd3b307299bf2391f2a0273643d56c
- SHA512 0603c8c17353e5833b1fb6e79603123a30cafd53be9d4f036ebf1efba9a5f9fdc7c6a289ef70b42a98e602da6baed0204c2e816c9d9a896d2d26412aae39c269
- SSDEEP 6144:k5K/y3D5asY5pasY5Ym4CZAKbKBCEwTp7B7kEDasY5PFpY+m4CZAKbKBCEwTp7Bg:kcUY5rY5jZDOEpBl5Y5jwZDOEpBlq
- TLSH T1FC056B523224DF77C266A7B5C990D2F50A2DEEE0E916C20734F0BF9FBEB26519D50281
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe 484 jester.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 484 jester.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 484 jester.exe